--- Crypt-Eksblowfish-0.009/lib/Crypt/Eksblowfish/Bcrypt.pm.alt 2011-04-28 00:08:34.000000000 +0400 +++ Crypt-Eksblowfish-0.009/lib/Crypt/Eksblowfish/Bcrypt.pm 2016-09-22 11:20:30.713891233 +0300 @@ -153,7 +153,7 @@ of the string is ignored on input. sub bcrypt($$) { my($password, $settings) = @_; croak "bad bcrypt settings" - unless $settings =~ m#\A\$2(a?)\$([0-9]{2})\$ + unless $settings =~ m#\A\$2([ay]?)\$([0-9]{2})\$ ([./A-Za-z0-9]{22})#x; my($key_nul, $cost, $salt_base64) = ($1, $2, $3); my $hash = bcrypt_hash({